CVE-2021-20203CWE-190

An integer overflow issue was found in the vmxnet3 NIC emulator of the QEMU for versions up to v5.2.0

published February 25, 2021

CVSS
—
EPSS
1%
Percentile
47.6
In the wild
Unconfirmed
What it is

An integer overflow issue was found in the vmxnet3 NIC emulator of the QEMU for versions up to v5.2.0. It may occur if a guest was to supply invalid values for rx/tx queue size or other NIC parameters. A privileged guest user may use this flaw to crash the QEMU process on the host resulting in DoS scenario.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00592 · 47.6th percentile
Weakness
CWE-190 · Integer Overflow or Wraparound
Published
2021-02-25T19:09Z
EPSS history
Timeline
  • 25 FEB 19:09Z
    An integer overflow issue was found in the vmxnet3 NIC emulator of the QEMU for versions up to v5.2.0
    cvelistv5